file[.]exe | Triage™

General

Target
file.exe
Size 277KB
Sample230703-drwfmaee55
SHA256 0600905449ba9b91c459bb4cb2859d8b33062475fc568930c15931f7fba4e5b2
MD5 91a5bb50d7b995bd3ca159d81aea47ef
SHA1 7dfd6243baf0f10909f52d6c87b9743703edcde4
SHA512 d332b39ba25f029e8399ce259c25de4f4204d6e5d7b139e87c6d570c5027b15ec40fc02e623dbc933cab9407417a0d3becb1f4a60ec5a225ad4ce57b846c1669
SSDEEP 6144:sLNb45ztL+cuauM0/AKgQpj1bkLMHS87zR:sRbsic6Mk2Qpjn7zR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 4aa773f91d20506f2979a40c36a81664
SHA256 0600905449ba9b91c459bb4cb2859d8b33062475fc568930c15931f7fba4e5b2
MD5 91a5bb50d7b995bd3ca159d81aea47ef
SHA1 7dfd6243baf0f10909f52d6c87b9743703edcde4
SHA512 d332b39ba25f029e8399ce259c25de4f4204d6e5d7b139e87c6d570c5027b15ec40fc02e623dbc933cab9407417a0d3becb1f4a60ec5a225ad4ce57b846c1669
SSDEEP 6144:sLNb45ztL+cuauM0/AKgQpj1bkLMHS87zR:sRbsic6Mk2Qpjn7zR
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17122

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetProfileIntW DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW GetSystemWindowsDirectoryW UnlockFile GetTickCount GetConsoleAliasesA GetNumberFormatA GetCompressedFileSizeW ClearCommBreak GetDateFormatA GetVolumePathNameW FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA GetStringTypeExW EnumSystemCodePagesA FindNextVolumeW MulDiv GetDevicePowerState ReplaceFileA GetComputerNameA FindFirstFileA OpenMutexW GetLongPathNameW SetLastError lstrcmpiA GetProcAddress BeginUpdateResourceW EnumDateFormatsExA IsValidCodePage CopyFileA LoadLibraryA CreateFileMappingA CreateHardLinkW SetProcessWorkingSetSize HeapWalk GetModuleHandleA SetLocaleInfoW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW SetCurrentDirectoryA GetConsoleOutputCP WriteConsoleA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle RaiseException

user32

GetClipboardOwner CharToOemBuffA CharUpperBuffW DdeCreateStringHandleA GetMenuBarInfo LoadMenuA DdeQueryStringA

gdi32

GetCharABCWidthsI

winhttp

WinHttpQueryHeaders

Sharing